Tasks
Observability and Troubleshooting
Use portal status, Grafana, route diagnostics, and workspace state to debug first-app failures.
Use Home for attention items and Observability for telemetry access. Use the domain page that owns the failing object for specific diagnostics: Applications for namespace/GitOps, Data & Services for storage, and Network & Exposure for routes and egress.
First-app checklist
| Check | Portal page |
|---|---|
| Tenant onboarding step is complete or actionable | Home |
| Namespace exists and is reconciled | Applications |
| GitOps source and kustomization are healthy | Applications |
| PVC intent and workload PVC reference match | Data & Services |
| Ingress host and TLS match assigned bounds | Network & Exposure |
| Pods, services, and routes have ready endpoints | Network & Exposure / Observability |
| Cost and billing state are visible | Billing |
Common failures
| Symptom | Likely cause | Where to look |
|---|---|---|
| GitOps does not apply | Bad repo URL, wrong path, missing credential, or namespace not ready. | Applications |
| HelmRelease RBAC error | Missing Flux service account or chart expects forbidden resources. | Applications |
| Pod cannot read secret | OpenBao path or ExternalSecret reference mismatch. | Applications |
| App loses data | PVC intent and workload mount do not match. | Data & Services |
Public URL shows 404 | Ingress host is missing or wrong. | Network & Exposure |
Public URL shows 503 | Service has no ready backend endpoint. | Network & Exposure |
| DNS seems stale | Resolver cache differs from route readiness. | Network & Exposure |
| Cost looks unexpected | Resource requests, replicas, PVC size, or managed services changed. | Billing |
RPC/function map
| Diagnostic area | gh0stplane surface |
|---|---|
| Tenant attention, checklist, access, and activity | GetTenantHomeWorkspace |
| GitOps, namespace, service-account, and secret workflow | GetTenantApplicationsWorkspace, GetTenantSecretWorkflow |
| Storage, managed service, protection, and restore state | GetTenantDataWorkspace |
| Network graph, route inventory, observed flows, drops | GetNetworkWorkspace, GetTenantExposureWorkspace |
| Grafana/access and usage summary | GetTenantObservabilityWorkspace |
| Billing/payment/invoice state | GetCustomerBillingView |
What not to do
- Do not use direct cluster mutations to fix GitOps-managed workloads.
- Do not create unbounded NetworkPolicies to "make it work".
- Do not commit secrets while debugging.
- Do not move a workload between namespaces without cleaning up stale routes and release-owned resources.
Questions or ready to get started?
Talk to us